{
    "properties": {
        "EAPClientConfiguration": {
            "description": "Specifies 802.1x EAP authentication parameters",
            "properties": {
                "AcceptEAPTypes": {
                    "description": "The EAP types accepted",
                    "items": {
                        "description": "An integer representing an EAP type, inside of the Accept EAP Types array",
                        "enum": [
                            13,
                            17,
                            21,
                            25,
                            43,
                            18,
                            23
                        ],
                        "type": "number"
                    },
                    "type": "array"
                },
                "EAPFASTProvisionPAC": {
                    "default": false,
                    "description": "If set, provisions the device ",
                    "type": "boolean"
                },
                "EAPFASTProvisionPACAnonymously": {
                    "default": false,
                    "description": "If set, provisions the device anonymously. Note that there are known man-in-the-middle attacks for anonymous provisioning",
                    "type": "boolean"
                },
                "EAPFASTUsePAC": {
                    "default": false,
                    "description": "If set, the device will use an existing PAC if it's present. Otherwise the server must present its identity using a certificate",
                    "type": "boolean"
                },
                "EAPSIMNumberOfRANDs": {
                    "default": 3,
                    "description": "The minimum number of RAND values accepted from the server. 3 is the default, and 2 is allowed, but offers less security. For use with EAP-SIM only.",
                    "type": "number"
                },
                "OneTimeUserPassword": {
                    "default": false,
                    "description": "If set, the user will be prompted for a password each time they connect to the network",
                    "type": "boolean"
                },
                "OuterIdentity": {
                    "description": "If TTLS, PEAP, or EAP-FAST is used, this string is used instead of the user's identity outside the encrypted tunnel. This value can be used to mask the true identity of the person using the network",
                    "type": "string"
                },
                "PayloadCertificateAnchorUUID": {
                    "description": "Array of UUIDs corresponding to the trusted certificates for this authentication",
                    "items": {
                        "description": "A UUID for a trusted certificate",
                        "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
                        "type": "string"
                    },
                    "type": "array"
                },
                "TLSAllowTrustExceptions": {
                    "description": "No longer supported in iOS 8 and later",
                    "type": "boolean"
                },
                "TLSTrustedServerNames": {
                    "description": "Array of Common Names of server certificates that can be trusted. The wildcard * can be used to match a range of strings",
                    "items": {
                        "description": "An item in the TLS Trusted Server Names array representing a Common Name of a server certificate.",
                        "type": "string"
                    },
                    "type": "array"
                },
                "TTLSInnerAuthentication": {
                    "default": "MSCHAPv2",
                    "description": "Specifies the inner authentication used by the TTLS module",
                    "enum": [
                        "PAP",
                        "EAP",
                        "CHAP",
                        "MSCHAP",
                        "MSCHAPv2"
                    ],
                    "type": "string"
                },
                "UserName": {
                    "description": "Username. If not provided, the user may be prompted during login",
                    "type": "string"
                },
                "UserPassword": {
                    "description": "Password. If not provided, the user may be prompted during login",
                    "type": "string"
                }
            },
            "type": "object"
        },
        "Password": {
            "description": "Specifies the password for the access point",
            "type": "string"
        },
        "PayloadCertificateUUID": {
            "description": "UUID of the certificate payload containing an identity used as the client credential",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadDescription": {
            "default": "802.1x Ethernet Settings",
            "description": "Description of the payload",
            "type": "string"
        },
        "PayloadDisplayName": {
            "default": "802.1x Ethernet Settings",
            "description": "Name of the payload",
            "type": "string"
        },
        "PayloadIdentifier": {
            "default": "com.apple.firstactiveethernet.managed",
            "description": "A unique identifier for the payload, dot-delimited.  Usually root PayloadIdentifier+subidentifier",
            "type": "string"
        },
        "PayloadOrganization": {
            "description": "This value describes the issuing organization of the profile, as displayed to the user",
            "type": "string"
        },
        "PayloadType": {
            "default": "com.apple.firstactiveethernet.managed",
            "description": "The type of the payload, a reverse dns string",
            "type": "string"
        },
        "PayloadUUID": {
            "default": "",
            "description": "Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF)",
            "pattern": "^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$",
            "type": "string"
        },
        "PayloadVersion": {
            "default": 1,
            "description": "The version of the whole configuration profile.",
            "type": "number"
        },
        "ProxyPACFallbackAllowed": {
            "description": "Proxy PAC Fallback Allowed",
            "type": "boolean"
        },
        "ProxyPACURL": {
            "description": "URL used to recieve proxy settings",
            "type": "string"
        },
        "ProxyPassword": {
            "description": "The password to authenticate with the proxy",
            "type": "string"
        },
        "ProxyServer": {
            "description": "The hostname of the proxy server",
            "type": "string"
        },
        "ProxyServerPort": {
            "description": "The port used to connect to the proxy server",
            "maximum": 65535,
            "minimum": 0,
            "type": "number"
        },
        "ProxyType": {
            "default": "None",
            "description": "The type of proxy configuration to use for this wireless connection",
            "enum": [
                "None",
                "Manual",
                "Auto"
            ],
            "type": "string"
        },
        "ProxyUsername": {
            "description": "The username for proxy server authentication",
            "type": "string"
        },
        "QoSMarkingPolicy": {
            "description": "Restrict fast lane QoS marking",
            "properties": {
                "QoSMarkingAppleAudioVideoCalls": {
                    "default": true,
                    "description": "Enable QoS for WiFi Calling, FaceTime, SMS, etc.",
                    "type": "boolean"
                },
                "QoSMarkingEnabled": {
                    "default": true,
                    "description": "Enable any kind of QoS marking",
                    "type": "boolean"
                },
                "QoSMarkingWhitelistedAppIdentifiers": {
                    "description": "Whitelist specific apps for QoS marking",
                    "items": {
                        "default": "",
                        "description": "Whitelisted App",
                        "type": "string"
                    },
                    "type": "array"
                }
            },
            "type": "object"
        },
        "TLSCertificateRequired": {
            "description": "If set, force a non-default authentication method. (if YES, uses certificate from PayloadCertificateUUID)",
            "type": "boolean"
        }
    },
    "title": "com.apple.firstactiveethernet.managed",
    "type": "object"
}